Information Security & Compliance Blog - Tandem

Vendor management

Alyssa Pugh Published Date: Mar 05, 2024 Vendor Management, Security and Compliance, Financial Institutions

6 Key Updates in the NIST Cybersecurity Framework (CSF) 2.0

On February 26, 2024, the National Institute of Standards and Technology (NIST) published an update to their Cybersecurity Framework (CSF). A decade…

Alyssa Pugh

Savannah Richardson Published Date: Oct 31, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Security and Compliance, Incident Management, Financial Institutions, Phishing, Banks

Updated Ransomware Self-Assessment Tool (R-SAT 2.0)

On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an…

Alyssa Pugh Published Date: Sep 05, 2023 Vendor Management

The Vendor Manager’s Guide to Subcontractor Risk Management

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jun 08, 2023 Vendor Management, Risk Assessments, Banks

New Third-Party Risk Management Guidance: What Community Banks Need to Know

On June 6, 2023, the Federal Deposit Insurance Corporation (FDIC), Federal Reserve (FRB), and Office of the Comptroller of the Currency (OCC)…

Alyssa Pugh

Leticia Saiid Published Date: Feb 06, 2023 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Incident Management

Credit Unions: What to Expect in Your 2023 NCUA IT Exam

Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will…

Alyssa Pugh Published Date: Feb 04, 2022 Vendor Management, Risk Assessments, Business Continuity Planning, Policy Management, Credit Unions, Audit Management, Incident Management, Banks

Why CISA Wants You to “Implement Cybersecurity Measures Now”

On January 18, 2022, the Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) released a new "Insights" memo with…

Alyssa Pugh Published Date: Jan 04, 2022 Vendor Management, Risk Assessments, Policy Management, Credit Unions, Security and Compliance, Financial Institutions, Phishing, Banks

What is Multifactor Authentication?

In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication…

Alyssa Pugh Published Date: Jul 29, 2021 Vendor Management

Proposed Vendor Management Guidance: What Banks Need to Know

Update: The federal banking agencies published proposed third-party risk management guidance. Learn more in our blog: New Proposed Third-Party Risk…

Alyssa Pugh Published Date: Jul 08, 2021 Vendor Management, Incident Management

Incident Response Plan Communication Guidelines

There is no question that when an incident occurs, there are a lot of people who may need to be notified, especially if you work for a financial…

Alyssa Pugh Published Date: May 14, 2021 Vendor Management, Risk Assessments, Business Continuity Planning, Cybersecurity Assessment Tool, Security and Compliance, Phishing

What Sets Tandem Apart?

At Tandem, we recognize there are a few GRC (governance, risk, and compliance) solutions on the market. So, why should you pick Tandem? Based on…

Alyssa Pugh Published Date: Apr 29, 2021 Vendor Management

Bank Service Company Act (BSCA) Frequently Asked Questions

In recent months, there has been a noted increase in the number of questions and conversations about the Bank Service Company Act (or "BSCA"). In…

Alyssa Pugh Published Date: Mar 04, 2021 Vendor Management, Incident Management

Third-Party Incident Response Playbook

Organizations partner with third parties when the benefit to the organization is perceived to be greater than the risk of outsourcing. With access to…

Thanks for visiting our

Tandem Blog